duracelltomi GTM4WP – A Google Tag Manager (GTM) plugin for WordPress

• CVE-2026-16597 High 7.2 GTM4WP <= 1.22.3 - Unauthenticated Stored Cross-Site Scripting via WooCommerce Billing Fields 0.4%
• CVE-2022-1961 Medium 5.5 Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID 1.1%
• CVE-2022-1707 Medium 6.1 Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search 89.3%